ReadSigil / Security

Security disclosure policy.

If you find a vulnerability in readsigil.com or its public tools, we want to hear about it.

Good-faith research is welcome

We will not pursue action against anyone who researches and reports a vulnerability in good faith, avoids privacy violations and data destruction, and gives us reasonable time to fix the issue before disclosing it.

Out of scope

• Denial-of-service or load testing of any kind
• Social engineering, phishing or physical attacks
• Accessing, changing or deleting other people's data beyond what is needed to show the issue
• Spam or automated mass submissions to forms and comment endpoints

How to report

Email [email protected] with the affected URL, steps to reproduce and the impact you observed. We aim to respond within 7 days.

Machine-readable contact details: /.well-known/security.txt (RFC 9116).